I've seen how tags can be applied to a single resource - how would I apply an "owner" or "company" tag to every resource in the entire project? I would prefer not to specific a tags dict on every single resource. I'm under the impression this would help me work out detailed resource ownership / usage within Azure cost analysis (I could be wrong).

Here is a method for AWS https://www.pulumi.com/blog/automatically-enforcing-aws-resource-tagging-policies/#automatically-applying-tags

You could also use a stack transformation: https://www.pulumi.com/docs/intro/concepts/resources/options/transformations/#stack-transformations

I saw transformations, is there a nicer way to drill down into a nested set of immutable objects beyond using TryGetValue? I need to get to the "image" tag inside a k8s configfile which is naturally buried a few levels deep.

• Reference to "full code" at the bottom of the post: https://github.com/joeduffy/aws-tags-example • Specifically to your question: https://github.com/joeduffy/aws-tags-example/blob/master/autotag-ts/taggable.ts

is there a nicer way to drill down into a nested set of immutable objects beyond using TryGetValue

dynamic

maybe?